This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json) Hash identifier: 8vaYMiktnQDfD1vyUHKtH2gRDWflEuIXWPfaOAk1FOI= Subject key identifier: CD:10:FD:27:9F:51:83:6E:F8:75:78:14:8C:49:9C:0B:D9:11:32:28 Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Certificate serial: 1EC0B0E746674D145B5B8DDC23881955383F9699 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft Manifest number: 0159 Signing time: Tue 02 Dec 2025 06:11:34 +0000 Manifest this update: Tue 02 Dec 2025 06:06:34 +0000 Manifest next update: Fri 05 Dec 2025 08:26:34 +0000 Files and hashes: 1: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: s3bVTDEV08gnmOxg2zw3dDA0YDxRgug+TOFOTtwInUc=) 2: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: qyEXaTUVLtEVprYtVPGwVwuspaFKdLEJ/OENEecXpuE=) 3: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: 67RbGhY+6ZVaOK1MwCZS3qjFq9gsaQZlwx9Mn1hUNpU=) 4: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: 17orHFCQWF/5DGMqqWKbU6pKgsvlNi/agPyICUt65aw=) 5: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: 2H20WDiLKraA5nZo1WLQY+1jKj2wwmLh+BUhMHSZcKQ=) 6: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 6uu5L9LCXycUnW0VXTaRuOdsIdBD80z20frDdHYbxHE=) 7: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: P817bpj3QzcjRrbCaM/W2Gc7faVQBs1Nu/ETi4DcQeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c0:b0:e7:46:67:4d:14:5b:5b:8d:dc:23:88:19:55:38:3f:96:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Validity Not Before: Dec 2 06:06:34 2025 GMT Not After : Dec 5 08:26:34 2025 GMT Subject: CN=CD10FD279F51836EF87578148C499C0BD9113228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:c1:ae:18:5c:d4:dc:ef:80:5a:9a:ac:9b: 56:2f:ae:ef:14:51:83:6d:56:f8:e0:df:8e:4a:f1: ae:73:05:d3:3d:04:a3:db:6e:fa:d3:17:fa:fd:7c: 9f:4b:6e:51:75:d3:02:08:f8:c5:d7:79:e2:d2:0b: e4:32:9f:12:33:39:45:f1:e4:c9:2b:ef:f4:0b:a4: e4:7a:45:72:2d:3e:3a:21:77:41:66:ec:7e:56:ea: a6:4a:e7:ac:40:36:55:20:72:a4:ca:2a:cf:bd:88: eb:ab:6e:85:b0:92:98:3b:c1:d0:d9:20:4f:68:72: 37:9f:a4:f7:4c:fa:bf:11:47:7f:e6:51:a2:f9:1b: af:d2:ea:e4:b2:ff:03:9f:2b:66:a9:e0:5f:60:af: b8:c7:2e:08:3f:c5:0e:8d:57:8d:01:08:e4:1a:3e: 81:4e:ad:92:ec:89:5b:7d:a8:50:76:79:6f:68:2a: d8:58:96:74:a7:e1:9f:bf:fa:2e:a2:74:80:0c:f5: 4b:d7:e5:c6:b8:1e:2a:96:99:8a:a8:6e:43:25:c6: 39:66:49:af:79:6d:3f:35:d9:16:f6:95:ed:96:db: 70:61:da:ec:48:e5:93:c3:e6:cc:51:3d:7a:0d:1c: 2f:1b:97:23:43:40:b2:8c:50:8c:5b:a4:9e:9b:29: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:10:FD:27:9F:51:83:6E:F8:75:78:14:8C:49:9C:0B:D9:11:32:28 X509v3 Authority Key Identifier: keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f1:41:c8:f0:b7:cf:fe:06:49:3a:bc:dd:60:25:e3:e8:71: 97:dd:50:e1:5c:2d:78:60:5c:78:5d:19:97:91:cf:7b:ce:6c: 30:f3:8c:64:62:a5:45:b9:03:82:59:c5:89:91:8f:03:85:4c: 82:5c:44:fa:b9:61:58:91:4c:f9:91:b5:4a:f4:b5:a4:8a:11: c8:97:e7:71:59:90:04:f8:f7:d1:40:4e:33:75:8a:ed:38:ad: 47:66:58:3c:99:c4:7c:33:8d:62:52:91:8b:bd:94:79:11:45: ec:bb:9a:90:c8:fe:ec:55:cb:9d:d8:70:62:32:46:62:1d:dd: 51:b4:50:90:d4:91:ae:cd:6c:77:04:eb:8f:8a:cf:38:ed:ff: 87:02:84:17:4b:fe:b9:9f:93:cd:04:f7:9c:c8:f1:1d:ca:8e: 5f:42:ff:a0:7f:2a:9c:71:ac:85:be:6c:43:ce:1a:8e:45:a4: da:21:73:78:cb:3b:30:ad:d1:ba:38:38:0a:a6:dd:4f:3e:68: c8:ce:b8:f4:a8:b9:1e:64:fc:8b:bd:83:6f:6e:59:28:f7:5c: 54:8b:42:17:c5:6d:69:3a:22:e5:21:7f:c9:dc:95:50:4f:c0: 81:6b:4a:0e:9a:10:a1:a7:bc:35:fc:3b:1c:d3:2b:0e:c8:45: fa:73:4d:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsCw50ZnTRRbW43cI4gZVTg/lpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB MkQ2NTk1NTAeFw0yNTEyMDIwNjA2MzRaFw0yNTEyMDUwODI2MzRaMDMxMTAvBgNV BAMTKENEMTBGRDI3OUY1MTgzNkVGODc1NzgxNDhDNDk5QzBCRDkxMTMyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYw8GuGFzU3O+AWpqsm1Yvru8U UYNtVvjg345K8a5zBdM9BKPbbvrTF/r9fJ9LblF10wII+MXXeeLSC+QynxIzOUXx 5Mkr7/QLpOR6RXItPjohd0Fm7H5W6qZK56xANlUgcqTKKs+9iOurboWwkpg7wdDZ IE9ocjefpPdM+r8RR3/mUaL5G6/S6uSy/wOfK2ap4F9gr7jHLgg/xQ6NV40BCOQa PoFOrZLsiVt9qFB2eW9oKthYlnSn4Z+/+i6idIAM9UvX5ca4HiqWmYqobkMlxjlm Sa95bT812Rb2le2W23Bh2uxI5ZPD5sxRPXoNHC8blyNDQLKMUIxbpJ6bKbDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzRD9J59Rg274dXgUjEmcC9kRMigwHwYDVR0j BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2 NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1 NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPxQcjwt8/+Bkk6vN1gJePocZfdUOFcLXhg XHhdGZeRz3vObDDzjGRipUW5A4JZxYmRjwOFTIJcRPq5YViRTPmRtUr0taSKEciX 53FZkAT499FATjN1iu04rUdmWDyZxHwzjWJSkYu9lHkRRey7mpDI/uxVy53YcGIy RmId3VG0UJDUka7NbHcE64+Kzzjt/4cChBdL/rmfk80E95zI8R3Kjl9C/6B/Kpxx rIW+bEPOGo5FpNohc3jLOzCt0bo4OAqm3U8+aMjOuPSouR5k/Iu9g29uWSj3XFSL QhfFbWk6IuUhf8nclVBPwIFrSg6aEKGnvDX8OxzTKw7IRfpzTUU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:18 2025 by rpki-client